{"ip":"34.87.187.183","total_events":570,"verdict":{"verdict":"scanning","label":"Scanning for known vulnerabilities","detail":"43 exploit-path probe(s)","confidence":"medium","network_type":null,"why":["43 request(s) matched a known exploit path.","Only GET/HEAD seen, no request body: scanning for the vulnerability, not delivering a payload.","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"418,743 bytes sent","bytes_sent":418743,"session_seconds":5,"persistent":false}},"first_seen":"2026-08-11T04:08:24","last_seen":"2026-08-11T04:08:29","events_24h":0,"events_7d":570,"geo":{"country_code":"SG","country_name":"Singapore","region":"","city":"Singapore","lat":1.2872,"lon":103.8507,"asn":396982,"org":"Google LLC"},"source_domain":"183.187.87.34.bc.googleusercontent.com","known_scanners":[],"scanner_tag":{"key":"gcp","label":"Google Cloud","category":"hosting_provider","url":"https://cloud.google.com/"},"cve_matches":[{"cve_id":"CVE-2024-37152","title":"Argo CD Unauthenticated Access to sensitive setting","severity":"medium","actively_exploited":false,"match_field":"url_path","matched_pattern":"/api/v1/settings"}],"malware":[],"top_ports":[{"port":80,"proto":"tcp","label":"HTTP","count":570}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":["ge11nn0500_7e7af0c224a8","ge11nn05en_813e32c09d15"]},"fingerprint_peers":{"ge11nn05en_813e32c09d15":32,"ge11nn0500_7e7af0c224a8":1},"user_agents":["Mozilla/5.0 (compatible; OAI-SearchBot/1.3; +https://openai.com/searchbot)","Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36 Edg/146.0.0.0","Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)","Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)","Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot","Mozilla/5.0 (compatible; Google-Extended/1.0; +http://www.google.com/bot.html)","Mozilla/5.0 (compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)"],"timeline":[{"date":"2026-08-11","count":570}],"recent_events":[{"timestamp":"2026-08-11T04:08:29","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en-US,en;q=0.9\",\"host\":\"<HONEYPOT>:80\",\"user-agent\":\"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/.ssh/id_ed25519","summary":"","payload_hex":"474554202f2e7373682f69645f6564323535313920485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"GET","user_agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)","ja3":"","session":"51340811-f728-4dfb-a096-7525665928aa","seq":2,"duration_ms":749,"bytes_in":610,"bytes_out":156},{"timestamp":"2026-08-11T04:08:29","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en-US,en;q=0.9\",\"host\":\"<HONEYPOT>:80\",\"user-agent\":\"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/kubernetes.yml","summary":"","payload_hex":"474554202f6b756265726e657465732e796d6c20485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"GET","user_agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)","ja3":"","session":"f0a7d7ae-f828-4ed2-8d67-6718c966a877","seq":5,"duration_ms":3167,"bytes_in":1504,"bytes_out":390},{"timestamp":"2026-08-11T04:08:29","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en-US,en;q=0.9\",\"host\":\"<HONEYPOT>:80\",\"user-agent\":\"Mozilla/5.0 (compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/database.yml","summary":"","payload_hex":"474554202f64617461626173652e796d6c20485454502f312e310d0a486f73743a20<HONEYPOT>3a38300d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b20416d7a6e2d536561726368426f742f312e303b202b68747470733a2f2f646576656c6f7065722e616d617a6f6e2e636f6d2f737570706f72742f616d617a6f6e626f74290d0a4163636570743a20746578742f68746d6c2c6170706c69636174696f6e2f7868746d6c2b786d6c2c6170706c69636174696f6e2f786d6c3b713d302e392c2a2f2a3b713d302e380d0a4163636570742d4c616e67756167653a20656e2d55532c656e3b713d302e390d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot)","ja3":"","session":"96e6cfa2-2f01-496f-aa33-e955ba63d3ab","seq":5,"duration_ms":3117,"bytes_in":1454,"bytes_out":390},{"timestamp":"2026-08-11T04:08:29","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en-US,en;q=0.9\",\"host\":\"<HONEYPOT>:80\",\"user-agent\":\"Mozilla/5.0 (compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/config/database.yml","summary":"","payload_hex":"474554202f636f6e6669672f64617461626173652e796d6c20485454502f312e310d0a486f73743a20<HONEYPOT>3a38300d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b20506572706c6578697479426f742f312e303b202b68747470733a2f2f706572706c65786974792e61692f706572706c6578697479626f74290d0a4163636570743a20746578742f68746d6c2c6170706c69636174696f6e2f7868746d6c2b786d6c2c6170706c69636174696f6e2f786d6c3b713d302e392c2a2f2a3b713d302e380d0a4163636570742d4c616e67756167653a20656e2d55532c656e3b713d302e390d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)","ja3":"","session":"797cd0fd-bda8-44af-b394-def802ab51ec","seq":3,"duration_ms":1126,"bytes_in":851,"bytes_out":234},{"timestamp":"2026-08-11T04:08:29","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en-US,en;q=0.9\",\"host\":\"<HONEYPOT>:80\",\"user-agent\":\"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/.bash_history","summary":"","payload_hex":"474554202f2e626173685f686973746f727920485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"GET","user_agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)","ja3":"","session":"ce2441c1-ea5a-4675-b201-7b8ad94e2af3","seq":5,"duration_ms":3017,"bytes_in":1503,"bytes_out":390},{"timestamp":"2026-08-11T04:08:29","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en-US,en;q=0.9\",\"host\":\"<HONEYPOT>:80\",\"user-agent\":\"Mozilla/5.0 (compatible; OAI-SearchBot/1.3; +https://openai.com/searchbot)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/.ssh/id_rsa","summary":"","payload_hex":"474554202f2e7373682f69645f72736120485454502f312e310d0a486f73743a20<HONEYPOT>3a38300d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b204f41492d536561726368426f742f312e333b202b68747470733a2f2f6f70656e61692e636f6d2f736561726368626f74290d0a4163636570743a20746578742f68746d6c2c6170706c69636174696f6e2f7868746d6c2b786d6c2c6170706c69636174696f6e2f786d6c3b713d302e392c2a2f2a3b713d302e380d0a4163636570742d4c616e67756167653a20656e2d55532c656e3b713d302e390d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; OAI-SearchBot/1.3; +https://openai.com/searchbot)","ja3":"","session":"9f620b1c-1bb2-4058-9035-7e7ba684236b","seq":5,"duration_ms":3017,"bytes_in":1501,"bytes_out":390},{"timestamp":"2026-08-11T04:08:29","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en-US,en;q=0.9\",\"host\":\"<HONEYPOT>:80\",\"user-agent\":\"Mozilla/5.0 (compatible; Google-Extended/1.0; +http://www.google.com/bot.html)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/log-viewer","summary":"","payload_hex":"474554202f6c6f672d76696577657220485454502f312e310d0a486f73743a20<HONEYPOT>3a38300d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b20476f6f676c652d457874656e6465642f312e303b202b687474703a2f2f7777772e676f6f676c652e636f6d2f626f742e68746d6c290d0a4163636570743a20746578742f68746d6c2c6170706c69636174696f6e2f7868746d6c2b786d6c2c6170706c69636174696f6e2f786d6c3b713d302e392c2a2f2a3b713d302e380d0a4163636570742d4c616e67756167653a20656e2d55532c656e3b713d302e390d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; Google-Extended/1.0; +http://www.google.com/bot.html)","ja3":"","session":"8b0172d8-dd1e-4114-949e-9dd1130165bb","seq":1,"duration_ms":101,"bytes_in":272,"bytes_out":78},{"timestamp":"2026-08-11T04:08:29","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en-US,en;q=0.9\",\"host\":\"<HONEYPOT>:80\",\"user-agent\":\"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/info.php","summary":"","payload_hex":"474554202f696e666f2e70687020485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"GET","user_agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","ja3":"","session":"3e11d895-6b50-4a3d-9d50-088a1d6d9451","seq":1,"duration_ms":101,"bytes_in":295,"bytes_out":78},{"timestamp":"2026-08-11T04:08:29","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en-US,en;q=0.9\",\"host\":\"<HONEYPOT>:80\",\"user-agent\":\"Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/phpinfo.php","summary":"","payload_hex":"474554202f706870696e666f2e70687020485454502f312e310d0a486f73743a20<HONEYPOT>3a38300d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b20416d617a6f6e626f742f302e313b202b68747470733a2f2f646576656c6f7065722e616d617a6f6e2e636f6d2f737570706f72742f616d617a6f6e626f74290d0a4163636570743a20746578742f68746d6c2c6170706c69636174696f6e2f7868746d6c2b786d6c2c6170706c69636174696f6e2f786d6c3b713d302e392c2a2f2a3b713d302e380d0a4163636570742d4c616e67756167653a20656e2d55532c656e3b713d302e390d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)","ja3":"","session":"8b8e6320-5269-4e98-a6bd-3326af85e764","seq":5,"duration_ms":3002,"bytes_in":1449,"bytes_out":390},{"timestamp":"2026-08-11T04:08:29","port":80,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en-US,en;q=0.9\",\"host\":\"<HONEYPOT>:80\",\"user-agent\":\"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/.circleci/config.yml","summary":"","payload_hex":"474554202f2e636972636c6563692f636f6e6669672e796d6c20485454502f312e310d0a486f73743a20<HONEYPOT>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","method":"GET","user_agent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot","ja3":"","session":"3956353a-0fc2-4f99-9e90-393d16ee9964","seq":5,"duration_ms":2992,"bytes_in":1507,"bytes_out":390}],"http_methods":[{"method":"GET","count":570}],"distinct_ports_total":1,"top_paths":[{"path":"/wp-config.php.bak","count":2,"ports":1},{"path":"/fetch?path=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Fsecurity-credentials%2F","count":2,"ports":1},{"path":"/api/webhook?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F","count":2,"ports":1},{"path":"/admin/config?cmd=cat+/root/.aws/credentials","count":2,"ports":1},{"path":"/root/.config/gcloud/application_default_credentials.json","count":2,"ports":1},{"path":"/.well-known/credentials.json","count":2,"ports":1},{"path":"/api/proxy?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F","count":2,"ports":1},{"path":"/@fs/root/.aws/credentials?import&raw??","count":2,"ports":1},{"path":"/api/proxy?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Fsecurity-credentials%2F","count":2,"ports":1},{"path":"/api/fetch?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Fsecurity-credentials%2F","count":2,"ports":1},{"path":"/fetch?path=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F","count":2,"ports":1},{"path":"/@fs/etc/passwd?import&raw??","count":2,"ports":1},{"path":"/api/fetch?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F","count":2,"ports":1},{"path":"/WEB-INF/classes/application.properties","count":2,"ports":1},{"path":"/api/download?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F","count":2,"ports":1}],"distinct_paths_total":200,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Accept-Language","Host","User-Agent"],"representative":[{"name":"Accept","value":"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8","notable":false},{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Accept-Language","value":"en-US,en;q=0.9","notable":false},{"name":"Host","value":"<HONEYPOT>:80","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)","notable":false}],"distinct_sets":1,"events_with_headers":10},"tags":[{"tag_id":"CVE-2024-37152","tag_type":"cve","title":"Argo CD Unauthenticated Access to sensitive setting","severity":"medium","actively_exploited":false,"match_field":"url_path","matched_pattern":"/api/v1/settings","reference_urls":["https://github.com/argoproj/argo-cd/security/advisories/GHSA-87p9-x75h-p4j2","https://nvd.nist.gov/vuln/detail/CVE-2024-37152"]}],"data_as_of":"2026-08-15T16:53:46.434684+00:00"}